$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.mft File: bPYEPvYahE8I4lOhk9XZRlSWJ50.mft (raw, json) Hash identifier: D14N1d8GMIWog0KheMNdgfKC+7T8OpJAwBEskc9krJA= Subject key identifier: F8:4C:CD:87:F6:3A:66:A9:DA:B5:26:BD:38:03:C8:5D:43:9B:A2:B9 Authority key identifier: 6C:F6:04:3E:F6:1A:84:4F:08:E2:53:A1:93:D5:D9:46:54:96:27:9D Certificate issuer: /CN=A91F3D37/serialNumber=6CF6043EF61A844F08E253A193D5D9465496279D Certificate serial: 017F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPYEPvYahE8I4lOhk9XZRlSWJ50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.mft Manifest number: 017C Signing time: Fri 25 Apr 2025 02:51:47 +0000 Manifest this update: Fri 25 Apr 2025 02:51:46 +0000 Manifest next update: Fri 02 May 2025 02:51:46 +0000 Files and hashes: 1: bPYEPvYahE8I4lOhk9XZRlSWJ50.crl (hash: 9+rlJr7PH2pI2w6/s1kd7ywJWFpM+uqKVXepGhuIpo0=) 2: 6F67CF8CDCF111ED9828F232C4F9AE02.roa (hash: UUhAaQeYrl7H0iCSeqj7JAOZrw6JcIfsjlzbvaWf61k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.crl rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPYEPvYahE8I4lOhk9XZRlSWJ50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 383 (0x17f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3D37, serialNumber=6CF6043EF61A844F08E253A193D5D9465496279D Validity Not Before: Apr 25 02:51:46 2025 GMT Not After : May 2 02:51:46 2025 GMT Subject: CN=680af8c3-f546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a2:4b:04:60:f8:2c:f0:6f:28:70:44:33:5c: 39:ef:21:6d:50:c9:ed:e2:f8:c2:7f:d6:f6:c1:80: a8:9c:9b:18:68:67:d6:1e:56:7e:33:1e:83:a2:08: 8a:76:c9:fd:6e:f9:1c:18:46:dc:d3:e6:74:be:4a: 0e:9a:44:06:c2:8b:06:e4:5b:1f:2d:0e:01:6c:b3: 8b:28:31:22:77:85:70:df:ed:4b:2f:c9:f8:fb:9e: 87:74:1c:d9:78:6e:57:b8:21:84:04:5d:4e:a4:c5: ac:c6:ce:be:ab:c9:38:72:45:19:b3:29:58:3e:e2: 6d:bc:e4:3a:ce:18:80:14:c1:03:da:1d:80:47:5a: 2a:e5:b0:c0:86:8f:f9:45:79:27:1b:a6:ec:77:47: a7:77:b7:00:ae:72:ed:e4:37:f5:77:0c:68:33:5f: 89:d9:8b:db:3c:7f:8d:82:25:63:90:77:17:71:c1: ec:15:42:23:74:30:fc:0b:5b:8e:bc:4c:3e:ad:d2: 54:3a:1f:72:54:65:6e:61:98:8f:df:c4:fa:4b:e0: f9:4a:de:1f:2f:c4:84:ce:5e:32:18:ee:cf:46:db: f1:c9:c4:dc:93:e6:13:2c:e6:39:16:bb:f1:44:d2: 0f:7e:2f:47:aa:b7:39:8c:6f:95:5b:04:41:a4:5a: 12:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:4C:CD:87:F6:3A:66:A9:DA:B5:26:BD:38:03:C8:5D:43:9B:A2:B9 X509v3 Authority Key Identifier: keyid:6C:F6:04:3E:F6:1A:84:4F:08:E2:53:A1:93:D5:D9:46:54:96:27:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPYEPvYahE8I4lOhk9XZRlSWJ50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:f0:2e:b8:ae:ac:f6:9c:28:2a:aa:46:9a:19:33:4a:5e:9d: e2:55:5b:6f:16:c2:71:81:65:5e:81:65:0d:a6:cd:a8:05:36: 30:f0:79:90:f7:0c:ad:9d:36:4b:5b:25:48:bd:e1:2a:d7:02: f8:44:af:97:75:15:f9:a6:f5:0e:57:66:95:26:cf:0e:ea:91: 47:82:cc:97:73:57:5a:fc:02:60:c0:fa:f0:40:7d:79:9e:c9: 6d:9c:89:c9:11:7d:14:b4:62:c9:05:f5:1a:46:4f:0b:79:a2: 19:bc:2f:c1:a2:6a:2e:d1:b0:a3:a9:f6:97:4b:09:fa:53:d6: 31:5a:f5:aa:eb:e7:b3:7f:59:11:d5:cb:b3:6d:b1:36:2d:4d: 18:67:1d:3a:aa:1c:59:f7:72:4a:32:84:fc:e4:48:23:17:78: e5:80:c6:8b:e5:fd:a5:6f:32:8d:2b:4b:64:f4:02:4d:bd:09: e7:13:42:77:d1:5c:fe:d6:20:4f:ec:05:9f:48:bd:aa:b4:e0: 93:29:04:a9:26:b4:19:cb:fc:72:39:55:e5:65:77:6c:80:d7: 88:89:d9:69:2e:0a:35:de:6e:9a:c7:35:7f:45:2e:b7:74:13: 18:b0:5f:90:5b:e7:50:22:4c:51:8e:a6:02:8b:df:9e:81:3c: 9d:75:06:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNEMzcxMTAvBgNVBAUTKDZDRjYwNDNFRjYxQTg0NEYwOEUyNTNBMTkzRDVEOTQ2 NTQ5NjI3OUQwHhcNMjUwNDI1MDI1MTQ2WhcNMjUwNTAyMDI1MTQ2WjAYMRYwFAYD VQQDEw02ODBhZjhjMy1mNTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoaJLBGD4LPBvKHBEM1w57yFtUMnt4vjCf9b2wYConJsYaGfWHlZ+Mx6DogiK dsn9bvkcGEbc0+Z0vkoOmkQGwosG5FsfLQ4BbLOLKDEid4Vw3+1LL8n4+56HdBzZ eG5XuCGEBF1OpMWsxs6+q8k4ckUZsylYPuJtvOQ6zhiAFMED2h2AR1oq5bDAho/5 RXknG6bsd0end7cArnLt5Df1dwxoM1+J2YvbPH+NgiVjkHcXccHsFUIjdDD8C1uO vEw+rdJUOh9yVGVuYZiP38T6S+D5St4fL8SEzl4yGO7PRtvxycTck+YTLOY5Frvx RNIPfi9Hqrc5jG+VWwRBpFoSWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPhMzYf2 Omap2rUmvTgDyF1Dm6K5MB8GA1UdIwQYMBaAFGz2BD72GoRPCOJToZPV2UZUlied MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0QzNy81RUU5NzgyQURD RUUxMUVEOEMzOEQwMzFDNEY5QUUwMi9iUFlFUHZZYWhFOEk0bE9oazlYWlJsU1dK NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JQWUVQdllhaEU4STRsT2hrOVhaUmxTV0o1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0QzNy81RUU5NzgyQURDRUUxMUVEOEMzOEQwMzFDNEY5QUUwMi9iUFlFUHZZYWhF OEk0bE9oazlYWlJsU1dKNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAV8C64rqz2nCgqqkaaGTNKXp3iVVtvFsJxgWVegWUNps2oBTYw8HmQ 9wytnTZLWyVIveEq1wL4RK+XdRX5pvUOV2aVJs8O6pFHgsyXc1da/AJgwPrwQH15 nsltnInJEX0UtGLJBfUaRk8LeaIZvC/Bomou0bCjqfaXSwn6U9YxWvWq6+ezf1kR 1cuzbbE2LU0YZx06qhxZ93JKMoT85EgjF3jlgMaL5f2lbzKNK0tk9AJNvQnnE0J3 0Vz+1iBP7AWfSL2qtOCTKQSpJrQZy/xyOVXlZXdsgNeIidlpLgo13m6axzV/RS63 dBMYsF+QW+dQIkxRjqYCi9+egTyddQb4 -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:06 2025 by rpki-client